1 /* 2 * Copyright (c) 2015-2018, ARM Limited and Contributors. All rights reserved. 3 * 4 * SPDX-License-Identifier: BSD-3-Clause 5 */ 6 7 #include <assert.h> 8 #include <errno.h> 9 #include <stddef.h> 10 #include <string.h> 11 12 #include <platform_def.h> 13 14 #include <arch.h> 15 #include <arch_helpers.h> 16 #include <bl31/bl31.h> 17 #include <common/bl_common.h> 18 #include <common/debug.h> 19 #include <cortex_a53.h> 20 #include <cortex_a57.h> 21 #include <denver.h> 22 #include <drivers/console.h> 23 #include <lib/mmio.h> 24 #include <lib/utils.h> 25 #include <lib/utils_def.h> 26 #include <plat/common/platform.h> 27 28 #include <memctrl.h> 29 #include <profiler.h> 30 #include <tegra_def.h> 31 #include <tegra_platform.h> 32 #include <tegra_private.h> 33 34 /* length of Trusty's input parameters (in bytes) */ 35 #define TRUSTY_PARAMS_LEN_BYTES (4096*2) 36 37 extern void memcpy16(void *dest, const void *src, unsigned int length); 38 39 /******************************************************************************* 40 * Declarations of linker defined symbols which will help us find the layout 41 * of trusted SRAM 42 ******************************************************************************/ 43 44 IMPORT_SYM(uint64_t, __RW_START__, BL31_RW_START); 45 IMPORT_SYM(uint64_t, __RW_END__, BL31_RW_END); 46 IMPORT_SYM(uint64_t, __RODATA_START__, BL31_RODATA_BASE); 47 IMPORT_SYM(uint64_t, __RODATA_END__, BL31_RODATA_END); 48 IMPORT_SYM(uint64_t, __TEXT_START__, TEXT_START); 49 IMPORT_SYM(uint64_t, __TEXT_END__, TEXT_END); 50 51 extern uint64_t tegra_bl31_phys_base; 52 extern uint64_t tegra_console_base; 53 54 static entry_point_info_t bl33_image_ep_info, bl32_image_ep_info; 55 static plat_params_from_bl2_t plat_bl31_params_from_bl2 = { 56 .tzdram_size = TZDRAM_SIZE 57 }; 58 static unsigned long bl32_mem_size; 59 static unsigned long bl32_boot_params; 60 61 /******************************************************************************* 62 * This variable holds the non-secure image entry address 63 ******************************************************************************/ 64 extern uint64_t ns_image_entrypoint; 65 66 /******************************************************************************* 67 * The following platform setup functions are weakly defined. They 68 * provide typical implementations that will be overridden by a SoC. 69 ******************************************************************************/ 70 #pragma weak plat_early_platform_setup 71 #pragma weak plat_get_bl31_params 72 #pragma weak plat_get_bl31_plat_params 73 #pragma weak plat_late_platform_setup 74 75 void plat_early_platform_setup(void) 76 { 77 ; /* do nothing */ 78 } 79 80 struct tegra_bl31_params *plat_get_bl31_params(void) 81 { 82 return NULL; 83 } 84 85 plat_params_from_bl2_t *plat_get_bl31_plat_params(void) 86 { 87 return NULL; 88 } 89 90 void plat_late_platform_setup(void) 91 { 92 ; /* do nothing */ 93 } 94 95 /******************************************************************************* 96 * Return a pointer to the 'entry_point_info' structure of the next image for 97 * security state specified. BL33 corresponds to the non-secure image type 98 * while BL32 corresponds to the secure image type. 99 ******************************************************************************/ 100 entry_point_info_t *bl31_plat_get_next_image_ep_info(uint32_t type) 101 { 102 entry_point_info_t *ep = NULL; 103 104 /* return BL32 entry point info if it is valid */ 105 if (type == NON_SECURE) { 106 ep = &bl33_image_ep_info; 107 } else if ((type == SECURE) && (bl32_image_ep_info.pc != 0U)) { 108 ep = &bl32_image_ep_info; 109 } 110 111 return ep; 112 } 113 114 /******************************************************************************* 115 * Return a pointer to the 'plat_params_from_bl2_t' structure. The BL2 image 116 * passes this platform specific information. 117 ******************************************************************************/ 118 plat_params_from_bl2_t *bl31_get_plat_params(void) 119 { 120 return &plat_bl31_params_from_bl2; 121 } 122 123 /******************************************************************************* 124 * Perform any BL31 specific platform actions. Populate the BL33 and BL32 image 125 * info. 126 ******************************************************************************/ 127 void bl31_early_platform_setup2(u_register_t arg0, u_register_t arg1, 128 u_register_t arg2, u_register_t arg3) 129 { 130 struct tegra_bl31_params *arg_from_bl2 = (struct tegra_bl31_params *) arg0; 131 plat_params_from_bl2_t *plat_params = (plat_params_from_bl2_t *)arg1; 132 image_info_t bl32_img_info = { {0} }; 133 uint64_t tzdram_start, tzdram_end, bl32_start, bl32_end; 134 uint32_t console_clock; 135 int32_t ret; 136 137 /* 138 * For RESET_TO_BL31 systems, BL31 is the first bootloader to run so 139 * there's no argument to relay from a previous bootloader. Platforms 140 * might use custom ways to get arguments, so provide handlers which 141 * they can override. 142 */ 143 if (arg_from_bl2 == NULL) { 144 arg_from_bl2 = plat_get_bl31_params(); 145 } 146 if (plat_params == NULL) { 147 plat_params = plat_get_bl31_plat_params(); 148 } 149 150 /* 151 * Copy BL3-3, BL3-2 entry point information. 152 * They are stored in Secure RAM, in BL2's address space. 153 */ 154 assert(arg_from_bl2 != NULL); 155 assert(arg_from_bl2->bl33_ep_info != NULL); 156 bl33_image_ep_info = *arg_from_bl2->bl33_ep_info; 157 158 if (arg_from_bl2->bl32_ep_info != NULL) { 159 bl32_image_ep_info = *arg_from_bl2->bl32_ep_info; 160 bl32_mem_size = arg_from_bl2->bl32_ep_info->args.arg0; 161 bl32_boot_params = arg_from_bl2->bl32_ep_info->args.arg2; 162 } 163 164 /* 165 * Parse platform specific parameters - TZDRAM aperture base and size 166 */ 167 assert(plat_params != NULL); 168 plat_bl31_params_from_bl2.tzdram_base = plat_params->tzdram_base; 169 plat_bl31_params_from_bl2.tzdram_size = plat_params->tzdram_size; 170 plat_bl31_params_from_bl2.uart_id = plat_params->uart_id; 171 plat_bl31_params_from_bl2.l2_ecc_parity_prot_dis = plat_params->l2_ecc_parity_prot_dis; 172 173 /* 174 * It is very important that we run either from TZDRAM or TZSRAM base. 175 * Add an explicit check here. 176 */ 177 if ((plat_bl31_params_from_bl2.tzdram_base != (uint64_t)BL31_BASE) && 178 (TEGRA_TZRAM_BASE != BL31_BASE)) { 179 panic(); 180 } 181 182 /* 183 * Reference clock used by the FPGAs is a lot slower. 184 */ 185 if (tegra_platform_is_fpga()) { 186 console_clock = TEGRA_BOOT_UART_CLK_13_MHZ; 187 } else { 188 console_clock = TEGRA_BOOT_UART_CLK_408_MHZ; 189 } 190 191 /* 192 * Get the base address of the UART controller to be used for the 193 * console 194 */ 195 tegra_console_base = plat_get_console_from_id(plat_params->uart_id); 196 197 if (tegra_console_base != 0U) { 198 /* 199 * Configure the UART port to be used as the console 200 */ 201 (void)console_init(tegra_console_base, console_clock, 202 TEGRA_CONSOLE_BAUDRATE); 203 } 204 205 /* 206 * The previous bootloader passes the base address of the shared memory 207 * location to store the boot profiler logs. Sanity check the 208 * address and initilise the profiler library, if it looks ok. 209 */ 210 if (plat_params->boot_profiler_shmem_base != 0ULL) { 211 212 ret = bl31_check_ns_address(plat_params->boot_profiler_shmem_base, 213 PROFILER_SIZE_BYTES); 214 if (ret == (int32_t)0) { 215 216 /* store the membase for the profiler lib */ 217 plat_bl31_params_from_bl2.boot_profiler_shmem_base = 218 plat_params->boot_profiler_shmem_base; 219 220 /* initialise the profiler library */ 221 boot_profiler_init(plat_params->boot_profiler_shmem_base, 222 TEGRA_TMRUS_BASE); 223 } 224 } 225 226 /* 227 * Add timestamp for platform early setup entry. 228 */ 229 boot_profiler_add_record("[TF] early setup entry"); 230 231 /* 232 * Initialize delay timer 233 */ 234 tegra_delay_timer_init(); 235 236 /* Early platform setup for Tegra SoCs */ 237 plat_early_platform_setup(); 238 239 /* 240 * Do initial security configuration to allow DRAM/device access. 241 */ 242 tegra_memctrl_tzdram_setup(plat_bl31_params_from_bl2.tzdram_base, 243 (uint32_t)plat_bl31_params_from_bl2.tzdram_size); 244 245 /* 246 * The previous bootloader might not have placed the BL32 image 247 * inside the TZDRAM. We check the BL32 image info to find out 248 * the base/PC values and relocate the image if necessary. 249 */ 250 if (arg_from_bl2->bl32_image_info != NULL) { 251 252 bl32_img_info = *arg_from_bl2->bl32_image_info; 253 254 /* Relocate BL32 if it resides outside of the TZDRAM */ 255 tzdram_start = plat_bl31_params_from_bl2.tzdram_base; 256 tzdram_end = plat_bl31_params_from_bl2.tzdram_base + 257 plat_bl31_params_from_bl2.tzdram_size; 258 bl32_start = bl32_img_info.image_base; 259 bl32_end = bl32_img_info.image_base + bl32_img_info.image_size; 260 261 assert(tzdram_end > tzdram_start); 262 assert(bl32_end > bl32_start); 263 assert(bl32_image_ep_info.pc > tzdram_start); 264 assert(bl32_image_ep_info.pc < tzdram_end); 265 266 /* relocate BL32 */ 267 if ((bl32_start >= tzdram_end) || (bl32_end <= tzdram_start)) { 268 269 INFO("Relocate BL32 to TZDRAM\n"); 270 271 (void)memcpy16((void *)(uintptr_t)bl32_image_ep_info.pc, 272 (void *)(uintptr_t)bl32_start, 273 bl32_img_info.image_size); 274 275 /* clean up non-secure intermediate buffer */ 276 zeromem((void *)(uintptr_t)bl32_start, 277 bl32_img_info.image_size); 278 } 279 } 280 281 /* 282 * Add timestamp for platform early setup exit. 283 */ 284 boot_profiler_add_record("[TF] early setup exit"); 285 286 INFO("BL3-1: Boot CPU: %s Processor [%lx]\n", 287 (((read_midr() >> MIDR_IMPL_SHIFT) & MIDR_IMPL_MASK) 288 == DENVER_IMPL) ? "Denver" : "ARM", read_mpidr()); 289 } 290 291 #ifdef SPD_trusty 292 void plat_trusty_set_boot_args(aapcs64_params_t *args) 293 { 294 args->arg0 = bl32_mem_size; 295 args->arg1 = bl32_boot_params; 296 args->arg2 = TRUSTY_PARAMS_LEN_BYTES; 297 298 /* update EKS size */ 299 if (args->arg4 != 0U) { 300 args->arg2 = args->arg4; 301 } 302 303 /* Profiler Carveout Base */ 304 args->arg3 = args->arg5; 305 } 306 #endif 307 308 /******************************************************************************* 309 * Initialize the gic, configure the SCR. 310 ******************************************************************************/ 311 void bl31_platform_setup(void) 312 { 313 /* 314 * Add timestamp for platform setup entry. 315 */ 316 boot_profiler_add_record("[TF] plat setup entry"); 317 318 /* Initialize the gic cpu and distributor interfaces */ 319 plat_gic_setup(); 320 321 /* 322 * Setup secondary CPU POR infrastructure. 323 */ 324 plat_secondary_setup(); 325 326 /* 327 * Initial Memory Controller configuration. 328 */ 329 tegra_memctrl_setup(); 330 331 /* 332 * Set up the TZRAM memory aperture to allow only secure world 333 * access 334 */ 335 tegra_memctrl_tzram_setup(TEGRA_TZRAM_BASE, TEGRA_TZRAM_SIZE); 336 337 /* 338 * Late setup handler to allow platforms to performs additional 339 * functionality. 340 * This handler gets called with MMU enabled. 341 */ 342 plat_late_platform_setup(); 343 344 /* 345 * Add timestamp for platform setup exit. 346 */ 347 boot_profiler_add_record("[TF] plat setup exit"); 348 349 INFO("BL3-1: Tegra platform setup complete\n"); 350 } 351 352 /******************************************************************************* 353 * Perform any BL3-1 platform runtime setup prior to BL3-1 cold boot exit 354 ******************************************************************************/ 355 void bl31_plat_runtime_setup(void) 356 { 357 /* 358 * During cold boot, it is observed that the arbitration 359 * bit is set in the Memory controller leading to false 360 * error interrupts in the non-secure world. To avoid 361 * this, clean the interrupt status register before 362 * booting into the non-secure world 363 */ 364 tegra_memctrl_clear_pending_interrupts(); 365 366 /* 367 * During boot, USB3 and flash media (SDMMC/SATA) devices need 368 * access to IRAM. Because these clients connect to the MC and 369 * do not have a direct path to the IRAM, the MC implements AHB 370 * redirection during boot to allow path to IRAM. In this mode 371 * accesses to a programmed memory address aperture are directed 372 * to the AHB bus, allowing access to the IRAM. This mode must be 373 * disabled before we jump to the non-secure world. 374 */ 375 tegra_memctrl_disable_ahb_redirection(); 376 377 /* 378 * Add final timestamp before exiting BL31. 379 */ 380 boot_profiler_add_record("[TF] bl31 exit"); 381 boot_profiler_deinit(); 382 } 383 384 /******************************************************************************* 385 * Perform the very early platform specific architectural setup here. At the 386 * moment this only intializes the mmu in a quick and dirty way. 387 ******************************************************************************/ 388 void bl31_plat_arch_setup(void) 389 { 390 uint64_t rw_start = BL31_RW_START; 391 uint64_t rw_size = BL31_RW_END - BL31_RW_START; 392 uint64_t rodata_start = BL31_RODATA_BASE; 393 uint64_t rodata_size = BL31_RODATA_END - BL31_RODATA_BASE; 394 uint64_t code_base = TEXT_START; 395 uint64_t code_size = TEXT_END - TEXT_START; 396 const mmap_region_t *plat_mmio_map = NULL; 397 #if USE_COHERENT_MEM 398 uint32_t coh_start, coh_size; 399 #endif 400 const plat_params_from_bl2_t *params_from_bl2 = bl31_get_plat_params(); 401 402 /* 403 * Add timestamp for arch setup entry. 404 */ 405 boot_profiler_add_record("[TF] arch setup entry"); 406 407 /* add memory regions */ 408 mmap_add_region(rw_start, rw_start, 409 rw_size, 410 MT_MEMORY | MT_RW | MT_SECURE); 411 mmap_add_region(rodata_start, rodata_start, 412 rodata_size, 413 MT_RO_DATA | MT_SECURE); 414 mmap_add_region(code_base, code_base, 415 code_size, 416 MT_CODE | MT_SECURE); 417 418 /* map TZDRAM used by BL31 as coherent memory */ 419 if (TEGRA_TZRAM_BASE == tegra_bl31_phys_base) { 420 mmap_add_region(params_from_bl2->tzdram_base, 421 params_from_bl2->tzdram_base, 422 BL31_SIZE, 423 MT_DEVICE | MT_RW | MT_SECURE); 424 } 425 426 #if USE_COHERENT_MEM 427 coh_start = total_base + (BL_COHERENT_RAM_BASE - BL31_RO_BASE); 428 coh_size = BL_COHERENT_RAM_END - BL_COHERENT_RAM_BASE; 429 430 mmap_add_region(coh_start, coh_start, 431 coh_size, 432 (uint8_t)MT_DEVICE | (uint8_t)MT_RW | (uint8_t)MT_SECURE); 433 #endif 434 435 /* map on-chip free running uS timer */ 436 mmap_add_region(page_align(TEGRA_TMRUS_BASE, 0), 437 page_align(TEGRA_TMRUS_BASE, 0), 438 TEGRA_TMRUS_SIZE, 439 (uint8_t)MT_DEVICE | (uint8_t)MT_RO | (uint8_t)MT_SECURE); 440 441 /* add MMIO space */ 442 plat_mmio_map = plat_get_mmio_map(); 443 if (plat_mmio_map != NULL) { 444 mmap_add(plat_mmio_map); 445 } else { 446 WARN("MMIO map not available\n"); 447 } 448 449 /* set up translation tables */ 450 init_xlat_tables(); 451 452 /* enable the MMU */ 453 enable_mmu_el3(0); 454 455 /* 456 * Add timestamp for arch setup exit. 457 */ 458 boot_profiler_add_record("[TF] arch setup exit"); 459 460 INFO("BL3-1: Tegra: MMU enabled\n"); 461 } 462 463 /******************************************************************************* 464 * Check if the given NS DRAM range is valid 465 ******************************************************************************/ 466 int32_t bl31_check_ns_address(uint64_t base, uint64_t size_in_bytes) 467 { 468 uint64_t end = base + size_in_bytes - U(1); 469 int32_t ret = 0; 470 471 /* 472 * Check if the NS DRAM address is valid 473 */ 474 if ((base < TEGRA_DRAM_BASE) || (base >= TEGRA_DRAM_END) || 475 (end > TEGRA_DRAM_END)) { 476 477 ERROR("NS address is out-of-bounds!\n"); 478 ret = -EFAULT; 479 } 480 481 /* 482 * TZDRAM aperture contains the BL31 and BL32 images, so we need 483 * to check if the NS DRAM range overlaps the TZDRAM aperture. 484 */ 485 if ((base < (uint64_t)TZDRAM_END) && (end > tegra_bl31_phys_base)) { 486 ERROR("NS address overlaps TZDRAM!\n"); 487 ret = -ENOTSUP; 488 } 489 490 /* valid NS address */ 491 return ret; 492 } 493